Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier: wyVXLTpKFI/JUL6C/CTZd0+lTus0o6pBD5TQ1sdRlHQ=
Subject key identifier: D7:D2:8E:08:A8:D0:65:92:DC:C3:B6:AD:0C:DB:62:10:C5:41:A9:B5
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial: 019D3865BCD945DB889121D43E0921384538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number: 0A6F
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: KY2w5pzQc/bDb25nc3hx2XRRgDaf/PRDjK/KLvmtJSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bc:d9:45:db:88:91:21:d4:3e:09:21:38:45:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=d7d28e08a8d06592dcc3b6ad0cdb6210c541a9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:14:ef:b2:b3:0f:66:c3:3d:51:70:0c:da:
35:e7:ba:d6:c5:53:9b:c2:ff:57:31:11:37:84:b5:
69:04:d5:fb:2e:e6:ee:fc:55:a6:da:6f:9f:44:82:
52:3c:0f:07:20:cb:3b:e6:87:78:5e:e3:fe:9a:17:
e6:6f:2e:de:73:4c:93:1b:ca:7c:86:a6:0f:36:03:
86:8e:3c:47:68:d5:26:b2:3e:cb:21:54:51:a5:46:
96:83:56:7e:2e:4b:66:3c:0c:39:3a:a0:6f:a5:1f:
00:46:c5:4c:1f:5d:1c:28:f2:48:9a:f8:6f:2e:d1:
4c:90:61:f7:d3:ec:d4:da:ce:c5:49:b5:1d:38:3d:
56:61:93:70:2e:c5:61:6a:c3:88:b3:27:ab:33:cc:
d9:db:1a:2d:31:99:2a:95:65:2b:c7:67:ab:59:5f:
4f:87:5d:46:98:d5:00:ac:96:cb:0e:cf:39:cc:b9:
b1:ac:12:f1:46:5d:92:20:b5:9a:4e:55:86:e9:2b:
38:6e:27:a3:52:02:a0:62:02:40:0c:f6:d7:b2:78:
7c:0a:0b:e6:54:a3:0d:8f:1f:c7:a4:94:3b:f8:1f:
62:f8:ca:ec:4e:f8:fc:6f:21:eb:b7:fd:72:9b:b0:
12:3d:ff:71:ac:d2:bd:f8:ac:5a:d7:0d:fc:5d:84:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D2:8E:08:A8:D0:65:92:DC:C3:B6:AD:0C:DB:62:10:C5:41:A9:B5
X509v3 Authority Key Identifier:
keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6e:b7:02:b0:41:7d:a1:67:40:4d:f3:97:78:b3:fd:89:89:
15:e4:32:a6:58:f5:84:08:ab:a0:95:37:ab:14:1f:3f:00:ed:
90:f3:fd:0f:64:34:a4:ee:a2:93:d0:18:09:9c:d5:c6:d1:56:
a8:b4:13:69:b7:f2:79:58:f2:dc:31:14:b7:07:13:08:b9:5a:
a1:1c:76:88:e8:62:78:63:83:ac:71:67:fa:5e:4d:0a:8e:ac:
e0:87:75:9f:55:33:11:ef:ed:a5:b0:f2:b0:4f:35:00:97:ac:
08:32:08:9b:6b:2e:fc:a2:ce:a6:fb:40:d6:31:b0:87:e8:14:
48:be:7c:14:6c:8a:dc:93:68:43:89:3d:38:8e:10:83:2f:68:
a7:30:11:36:24:c7:dd:09:cf:bf:14:3a:7d:c3:63:77:a0:d4:
99:b9:3d:54:e3:f3:e6:43:8e:45:6a:d4:2e:d3:3a:fd:8b:a9:
14:8e:3f:ec:33:d9:67:7d:dc:19:d8:3f:9b:d9:e1:cd:8f:a7:
40:31:60:38:a1:f1:0b:fc:5e:48:31:e2:ac:91:06:aa:ac:c6:
26:a9:9b:90:91:f5:9a:ca:1c:79:40:cb:03:25:de:8c:59:7f:
75:2c:02:5a:80:a2:35:e9:40:78:d3:ea:fe:9f:c5:c8:90:93:
18:26:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:35 2026 by rpki-client